[NCLUG] FW: strange message sent to root
mike cullerton
michaelc at cullerton.com
Tue Feb 27 09:04:43 MST 2001
on 2/27/01 8:58 AM, Mike Loseke at mike at verinet.com wrote:
>
> You do realize that this is output from tcp_wrappers detecting someone
> attempting to scan or hit a service on your box for which this trap has
> been sent, correct?
>
> What happened was that someone was scanning your box for open ports.
> Seems that tcp_wrappers is listening to them and configured to do a
> safe_finger back at them to try to determine who was logged on there.
>
> Check /etc/inetd.conf, I'll bet stuff is being run by tcpd.
mike, i don't understand what you are trying to tell me here. my inetd.conf
only has time, ftp, cvspserver and imap2.
-- mike cullerton
More information about the NCLUG
mailing list